crates.io/routinator CVE-2023-39916: critical 9.3, EPSS 0.64%
NLnet Labs’ Routinator vulnerable to path traversal
Action: Upgrade routinator to 0.12.2 or later.
cargo update -p routinator --precise 0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.0 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: GHSA-5rxf-fqch-7vqp
- https://nvd.nist.gov/vuln/detail/CVE-2023-39916
- https://github.com/NLnetLabs/routinator/pull/892
- https://github.com/NLnetLabs/routinator
- https://github.com/NLnetLabs/routinator/releases/tag/v0.12.2
- https://nlnetlabs.nl/downloads/routinator/CVE-2023-39916.txt
CVE-2023-39916 · published · modified · JSON